Blog & Resources
Security awareness tips, phishing prevention guides, and best practices.
39 Passkey Attack Methods Revealed
Researchers have documented 39 attack methods against passkey authentication, showing that FIDO2 cryptography can remain intact while accounts are sti
CrowdStrike Falcon zero-day 'FalconFlank' gives SYSTEM
A researcher released a CrowdStrike Falcon zero-day exploit that escalates privileges to SYSTEM on fully updated Windows 11 and Server 2025.
Chrome zero-day CVE-2026-85046 exploited in attacks
Google patched an actively exploited high-severity type confusion flaw in Chrome's V8 engine, CVE-2026-85046, along with 11 other vulnerabilities.
Cisco IOS XR Critical Flaws Fixed in New Update
Cisco disclosed critical flaws in IOS XR and Nexus 9000 switches. Patches are available for IOS XR, but Nexus 9000 has no fix yet.
OpenAI Codex Security Tool Released
OpenAI released @openai/codex-security, a CLI and SDK for finding, validating, and fixing security vulnerabilities in code.
China-Linked Hackers Hid in Cisco Routers, Stole Admin
A China-linked cyberespionage group compromised Cisco routers, hiding activity and stealing administrator credentials from network administrators.
Kitploit Lists Windows Kernel Exploitation Tools
Kitploit, a directory for hacking and pentesting tools, features Windows kernel exploitation resources to find and analyze vulnerabilities.
Critical Cisco Nexus 9000 Flaw Allows Root Code Execution
Cisco patched a critical Nexus 9000 vulnerability (CVE-2026-20212, CVSS 9.8) allowing unauthenticated remote code execution as root.
Supply Chain Attacks Exploit Trusted Software
Recent breach reports show attackers compromising trusted packages, build tools, or base images to infiltrate targets, bypassing traditional defenses.
Microsoft Exchange CVE-2026-62911: Patch Now
Microsoft patched CVE-2026-62911, a high-severity Exchange Server auth bypass. Administrators should apply the update immediately.
Researcher drops CrowdStrike Falcon zero-day PoC
Researcher Nightmare Eclipse released FalconFlank, a privilege escalation exploit for CrowdStrike Falcon, affecting fully updated Windows systems.
CTEM: A New Approach to Vulnerability Management
Traditional vulnerability management is overwhelmed by CVE volume and AI-driven exploits.